Re:Re: Puzzled at flags.hierarchicala and neighbors_do_private_keys after reading FAQ. :-(

Thanks, Henrik pal!

I think when !flags.hierarchical is true, we should not send
request to any of the ICP peers and should send the request directly
to the server. Am I correct?

I still have a question. After reading "What does ``Disabling use of private keys'' mean?"
in FAQ, I am puzzled why a cache can use an object with a private key in another ICP peer?
I think the object with private keys can only be shared by one user until it is public. How
can other peer ICP caches use an object with private key?

Look at the following statements taken from FAQ,

  When Squid sends ICP queries, it uses the ICP reqnum field to hold the
  private key data. In other words, when Squid gets an ICP reply, it
  uses the reqnum value to build the private cache key for the pending
  object.

Suppose user A request object O in cache C1, cache C1 try to find it
in cache C2, C2 tells C1 that the object O is in C2 but has a private key. I think C1 should not use object
O in C2. But from the statements above, I think the above statements shows that a cache can use
an object in the peer ICP cache with private key. :-)

Best regards,
George Ma

----- Original Message -----
From: Henrik Nordstrom
To: maer727@sohu.com ;squid-dev@squid-cache.org
Cc: squid-dev@squid-cache.org
Subject: Re: Puzzled at flags.hierarchicala and neighbors_do_private_keys after reading FAQ. :-(
Sent: Sat Apr 20 04:16:39 CST 2002

> On Friday 19 April 2002 15:32, maer727@sohu.com wrote:
>
> > After reading FAQ about private keys, I still puzzled at the
> > following statements in STORE.c, line 479, Squid-2.5.PRE6,
> >
> > if (neighbors_do_private_keys || !flags.hierarchical)
> > storeSetPrivateKey(e);
>
> The above condition is best understood if read in the "inverse".
>
> If whe have neighbors not doing private ICP keys and the request
> may nee to be sent to them, then we cannot use a private key for this
> request.
>
> Inore this for now, simply assume storeSetPrivateKey() always to be
> called here.
>
> > I still have a trouble, after reading FAQ, I think
> > !flags.hierarchical means we should send the request directly to
> > origin servers and not send request to peer cache neighbours, but,
> > I do not think it has anything to do with private keys.
> >
> > What is the relationship between !flags.hierarchical and private
> > keys?
>
> That we can use private keys even if there is ICP peers who cannot
> delal with private keys if we do not plan on forwarding the request
> to these ICP peers.
>
> Regards
> Henrik
Received on Fri Apr 19 2002 - 23:40:57 MDT